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Abstract 

We study sincere-strategy preference-based approval voting (SP-AV), a system proposed 
by Brams and Sanver [ 1 1 and here adjusted so as to coerce admissibility of the votes (rather 
than excluding inadmissible votes a priori), with respect to procedural control. In such con- 
trol scenarios, an external agent seeks to change the outcome of an election via actions such as 
adding/deleting/partitioning either candidates or voters. SP-AV combines the voters' preference 
rankings with their approvals of candidates, where in elections with at least two candidates the 
voters' approval strategies are adjusted — if needed — to approve of their most-preferred candi- 
date and to disapprove of their least-preferred candidate. This rule coerces admissibility of the 
votes even in the presence of control actions, and hybridizes, in effect, approval with pluralitiy 
voting. 

We prove that this system is computationally resistant (i.e., the corresponding control prob- 
lems are NP-hard) to 19 out of 22 types of constructive and destructive control. Thus, SP-AV 
has more resistances to control than is currently known for any other natural voting system 
with a polynomial-time winner problem. In particular, SP-AV is (after Copeland voting, see 
Faliszewski et al. E0) the second natural voting system with an easy winner-determination 
procedure that is known to have full resistance to constructive control, and unlike Copeland 
voting it in addition displays broad resistance to destructive control. 
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1 Introduction 



Voting provides a particularly useful method for preference aggregation and collective decision- 
making. While voting systems were originally used in political science, economics, and operations 
research, they are now also of central importance in various areas of computer science, such as 
artificial intelligence (in particular, within multiagent systems). In automated, large-scale computer 
settings, voting systems have been applied, e.g., for planning [5 ] and similarity search [6], and have 
also been used in the design of recommender systems [7] and ranking algorithms 00 (where they 
help to lessen the spam in meta-search web-page rankings). For such applications, it is crucial to 
explore the computational properties of voting systems and, in particular, to study the complexity 
of problems related to voting (see, e.g., the survey by Faliszewski et al. [9]). 

The study of voting systems from a complexity-theoretic perspective was initiated by Bartholdi, 
Tovey, and Trick's series of seminal papers about the complexity of winner determination |[T0l . 
manipulation iPTTTl . and procedural control lfl2l in elections. This paper contributes to the study 
of electoral control, where an external agent — traditionally called the chair — seeks to influ- 
ence the outcome of an election via procedural changes to the election's structure, namely via 
adding/deleting/partitioning either candidates or voters (see Section l2T2l for the formal definitions of 
our control problems). We consider both constructive control (introduced by Bartholdi, Tovey, and 
Trick lfT2lO . where the chair's goal is to make a given candidate the unique winner, and destructive 
control (introduced by Hemaspaandra, Hemaspaandra, and Rothe lfT3l ). where the chair's goal is to 
prevent a given candidate from being a unique winner. 

We investigate the same twenty types of constructive and destructive control that were studied 
for approval voting lfl3ll and two additional control types introduced by Faliszewski et al. [14J (see 
also (H), and we do so for a variant of a voting system that was proposed by Brams and Sanver 111 as 
a combination of preference-based and approval voting. Approval voting was introduced by Brams 
and Fishburn [15]] as follows: Every voter either approves or disapproves of each candidate, and 
every candidate with the largest number of approvals is a winner. One of the simplest preference- 
based voting systems is plurality: All voters report their preference rankings of the candidates, 
and the winners are the candidates that are ranked first-place by the largest number of voters. The 
purpose of this paper is to show that Brams and Sanver's combined system (adapted here so as to 
keep its useful features even in the presence of control actions) combines the strengths, in terms of 
computational resistance to control, of plurality and approval voting. 

Some voting systems are immune to certain types of control in the sense that it is never possible 
for the chair to reach his or her goal via the corresponding control action. Immunity to any type of 
control unconditionally shields the voting system against this particular control type. However, like 
most voting systems approval voting is susceptible (Le., not immune) to many types of control, and 
plurality voting is susceptible to all types of controllJ However, and this was Bartholdi, Tovey, and 
Trick's brilliant insight fl2l . even for systems susceptible to control, the chair's task of controlling 
a given election may be too hard computationally (namely, NP-hard) for him or her to succeed. The 

'A related line of research has shown that, in principle, all natural voting systems can be manipulated by strategic vot- 
ers. Most notable among such results is the classical work of Gibbard 1 16 1 and Satterthwaite 1 17|. The study of strategy- 
proofness is still an extremely active and interesting area in social choice theory (see, e.g., Duggan and Schwartz 1 18|) 
and in artificial intelligence (see, e.g., Everaere et al. 1191 ). 
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Table 1: Number of resistances, immunities, and vulnerabilities to our 22 control types. (Regarding 
the "Condorcet" column, see Footnote [3]) 



voting system is then said to be resistant to this control type. If a voting system is susceptible to 
some type of control, but the chair's task can be solved in polynomial time, the system is said to be 
vulnerable to this control type. 

The quest for a natural voting system with an easy winner-determination procedure that is uni- 
versally resistant to control has lasted for more than 15 years now. Among the voting systems that 
have been studied with respect to control are plurality, Condorcet, approval, cumulative, Llull, and 
(variants of) Copeland voting |[T2l [TBI |20l |2T1 [T4l l3l 1221 l2l. Among these systems, plurality and 
Copeland voting (denoted Copeland 5 in (HO) display the broadest resistance to control, yet even 
they are not universally control-resistant. The only system currently known to be fully resistant — to 
the 20 types of constructive and destructive control studied in lfT3l l20l — is a highly artificial sys- 
tem constructed via hybridization l20l . (We mention that this system was not designed for direct, 
real-world use as a "natural" system but rather was intended to rule out the existence of a certain 
impossibility theorem [20].) 

While approval voting nicely distinguishes between each voter's acceptable and inacceptable 
candidates, it ignores the preference rankings the voters may have about their approved (or disap- 
proved) candidates. This shortcoming motivated Brams and Sanver [1J to introduce a voting system 
that combines approval and preference-based voting, and they defined the related notions of sincere 
and admissible approval strategies, which are quite natural requirements. We adapt their sincere- 
strategy preference-based approval voting system in a natural way such that, for elections with at 
least two candidates, admissibility of approval strategies (see Definition l2.ll) can be ensured even in 
the presence of control actions such as deleting candidates and partitioning candidates or votersll 
The purpose of this paper is to study if, and to what extent, this system inherits the control resis- 
tances of plurality (which is perhaps the simplest preference-based system) and approval voting. 
Denoting this system by SP-AV, we show that SP-AV does combine all the resistances of plurality 
and approval voting. 

More specifically, we prove that sincere-strategy preference-based approval voting is resistant to 
19 and vulnerable to only three of the 22 types of control considered here. For comparison, Table [JJ 
shows the number of resistances, immunities, and vulnerabilities to our 22 control types that are 

2 Note that in control by partition of voters (see Section lZ2t the run-off may have a reduced number of candidates. 
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known for each of CondorcetJl approval, Llull, plurality^ and Copeland voting (see lfl2l [T3l |2l \\4\ 
3]), and for SP-AV (see Theorem ED and Table||]in Section©. 

This paper is organized as follows. In Section |2l we define and discuss sincere-strategy 
preference-based approval voting, the types of control studied in this paper, and the notions of 
immunity, susceptibility, vulnerability, and resistance. In Section [3j we prove our results on SP-AV. 
Finally, in Section [4] we give our conclusions and state some open problems. 

2 Preliminaries 

2.1 Preference-Based Approval Voting 

An election E = (C, V) is specified by a finite set C of candidates and a finite collection V of voters 
who express their preferences over the candidates in C, where distinct voters may, of course, have 
the same preferences. How the voter preferences are represented depends on the voting system 
used. In approval voting (AV, for short), every voter draws a line between his or her acceptable and 
inacceptable candidates (by specifying a 0- 1 approval vector, where represents disapproval and 1 
represents approval), yet does not rank them. In contrast, many other important voting systems (e.g., 
Condorcet voting, Copeland voting, all scoring protocols, including plurality, Borda count, veto, 
etc.) are based on voter preferences that are specified as tie-free linear orderings of the candidates. 
As is most common in the literature, votes will here be represented nonsuccinctly: one ballot per 
voter. Note that some papers (e.g., E31 l2l [T4l l3lD also consider succinct input representations for 
elections where multiplicities of votes are given in binary. 

Brams and Sanver |T) introduced a voting system that combines approval and preference-based 
voting. To distinguish this system from other systems that these authors introduced with the same 
purpose of combining approval and preference-based voting [24J, we call the variant considered 
here (including the assumption of sincerity as explained below and including Rule Q] below, which 
will coerce admissibility) sincere-strategy preference-based approval voting (SP-AV, for short). 

Definition 2.1 (Brams and Sanver HI). Let (C,V) be an election, where the voters both indicate 
approvals/disapprovals of the candidates and provide a tie-free linear ordering of all candidates. 
For each voter v EV, an AV strategy of v is a subset S V CC such that v approves of all candidates 
in S v and disapproves of all candidates in C — S v . The list of AV strategies for all voters in V is 

3 Note that TablefJJlists only 14 instead of 22 types of control for Condorcet. The reason is that, as in [ 131, we consider 
two types of control by partition of candidates (namely, with and without run-off) and one type of control by partition of 
voters, and for each partition case we use the rules TE ("ties eliminate") and TP ("ties promote") for handling ties that 
may occur in the corresponding subelections (see Section l2~2l . However, since Condorcet winners are always unique 
when they exist, the distinction between TE and TP is not made for the partition cases within Condorcet voting. Note 
further that the two additional control types in Section [2.2. 1 1 (namely, constructive and destructive control by adding a 
limited number of candidates (211141 ) have not been considered for Condorcet voting I T21I13I . 

4 Regarding the references given in Table Q] for plurality, Faliszewski et al. (2] 1141 note that plurality is resistant 
to constructive and destructive control by adding a limited number of candidates (see Section [2~2l for the definition of 
this problem). Hemaspaandra et al. 1131 obtained all other results for destructive control within plurality, and for the 
constructive partitioning control cases in models TE and TP. The remaining results for plurality are due to Bartholdi et 
al. CD. 
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called an AV strategy profile for (C,V). (We sometimes also speak of V's AV strategy profile for 
C.) For each c G C, let score (c,v)(c) = \\{v G V \c G S v }\\ denote the number of c's approvals. Every 
candidate c with the largest score /cy\(c) is a winner of election (C,V). 

An AV strategy S v of a voter v G V is said to be admissible if S v contains v 's most-preferred 
candidate and does not contain v 's least-preferred candidate^ S v is said to be sincere if for each 
c G C, if v approves of c then v also approves of each candidate ranked higher than c {i.e., there 
are no gaps allowed in sincere approval strategies). An AV strategy profile for (C,V) is admissible 
(respectively, sincere) if the AV strategies of all voters in V are admissible (respectively, sincere). 

Admissibility and sincerity are quite natural requirements. In particular, requiring the voters to 
be sincere ensures that their preference rankings and their approvals/disapprovals are not contra- 
dictory. Note that sincere strategies for at least two candidates are always admissible if voters are 
neither allowed to approve of everybody nor to disapprove of everybody (i.e., if we require voters v 
to have only AV strategies S v with ^ S v ^ C), an assumption adopted by Brams and Sanver 

[1|@ 

Henceforth, we will assume that only sincere AV strategy profiles are considered, which — assuming 
that the trivial cases S v = and S v = C are excluded — necessarily are admissible whenever there are 
at least two candidates^ A vote with an insincere strategy will be considered void. 

The following notation was used by Brams and Sanver for a different election system ll24l . 
but is useful for SP-AV as well: Preferences are represented by a left-to-right ranking (separated 
by a space) of the candidates (e.g., a b c), with the leftmost candidate being the most-preferred 
one, and approval strategies are denoted by inserting a straight line into such a ranking, where all 
candidates left of this line are approved of and all candidates right of this line are disapproved of 
(e.g., "a | b c" means that a is approved of, while both b and c are disapproved of by this voter). In 
our constructions, we sometimes also insert a subset BCC into such approval rankings, where we 
assume some arbitrary, fixed order of the candidates in B (e.g., "a | B c" means that a is approved 
of, while all b G B and c are disapproved of by this voter). 

2.2 Control Problems for Preference-Based Approval Voting 

The control problems considered here were introduced by Bartholdi, Tovey, and Trick lfl2l for con- 
structive control and by Hemaspaandra, Hemaspaandra, and Rothe [13] for destructive control. In 
constructive control scenarios the chair's goal is to make a favorite candidate win, and in destructive 
control scenarios the chair's goal is to ensure that a despised candidate does not win. As is common, 
the chair is assumed to have complete knowledge of the voters' preference rankings and approval 
strategies^ and as in most papers on electoral control we define the control problems in the unique- 

5 Brams and Sanver [1] define an AV strategy to be admissible if it is not dominated in a game-theoretic sense 1151 , 
and note that "admissible strategies under AV involve always voting for a most-preferred candidate and never voting for a 
least-preferred candidate." Since we do not focus on the game-theoretic aspects of AV strategies, we define admissibility 
as in Definition |2.1| 

6 Brams and Sanver actually preclude only the case S v = C for sincere voters v by stating that "sincere strategies are 
always admissible if we exclude 'vote for everybody' " [ 1 1. However, an AV strategy that disapproves of all candidates 
obviously is sincere, yet not admissible according to Definition ^. 11 which is why we also exclude the case of S v = 0. 

7 Note that an AV strategy is never admissible for less than two candidates. 

8 A detailed discussion of this assumption can be found in 1 13 1. In a nutshell, one justification of this assumption 
is that it is realistic in many (though certainly not in all) situations, particularly in those involving small-scale private 
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winner model|_| In this model, the chair seeks to, via the control action, either make a designated 
candidate the unique winner (in the constructive case) or to prevent a designated candidate from 
being a unique winner (in the destructive case). 

To achieve his or her goal, the chair modifies the structure of a given election via 
adding/deleting/partitioning either candidates or voters. Such control actions — specifically those 
with respect to control via deleting or partitioning candidates or via partitioning voters — may have 
an undesirable impact on the resulting election in that they might turn admissible AV strategies into 
inadmissible ones. That is why we define the following rule that coerces admissibility (even under 
such control actions): 

Rule 1 (AV Strategy Rewrite Rule). If in an election (C, V) with ||C|| > 2 we have S V = Q) or S V = C 
for some voter v E V, then each such voter's AV strategy is adjusted to approve of his or her top 
candidate and to disapprove of his or her bottom candidate. 

This rule coerces ^ S v for each v E V whenever there are at least two candidates. That 
is, though it is legal for a voter to cast an inadmissible vote, the SP-AV system will rewrite this 
vote to make it admissible. In Section 1231 below, we will briefly discuss the SP-AV system and, in 
particular, some subtle points regarding RuleQ] 

We now formally define our control problems, where each problem is defined by stating the 
problem instance together with two questions, one for the constructive and one for the destructive 
case. These control problems are tailored to sincere-strategy preference-based approval voting by 
requiring every election occurring in these control problems (be it before, during, or after a control 
action — so, in particular, this also applies to the subelections in the partitioning cases) to have a 
sincere AV strategy profile. Note that when the number of candidates is reduced (due to deleting 
candidates or partitioning candidates or voters), approval lines may have to be moved in accordance 
with Ruled] 

To avoid unnecessary repetition, when defining the 22 control scenarios and problems consid- 
ered in this paper, we will omit (or only very briefly sketch) the motivation of these control scenarios. 
Note, however, that each scenario considered has a natural real-world interpretation — ranging from 
"get-out-the-vote" drives (control by adding voters) over vote suppression or disenfranchisement 
(control by deleting voters) to gerrymandering (control by partitioning voters) for voter control, 
and similarly natural real-world interpretations have been discussed in detail for the single cases of 
candidate control. These real-world interpretations and motivating examples have been described 
at length in a number of previous papers on control, such as |Q21[T3]|2]|20). (Note that the journal 
version of [20 ] appears in the same special issue as the present paper.) 

elections and in those involving large-scale elections among software agents that cooperate in a multiagent environment 
and have an incentive to reveal their preferences over the given alternatives. Another justification is that this paper focuses 
on proving control resistances of (i.e., NP-hardness results for) SP-AV, and an NP-hardness result in the more restrictive 
setting of complete knowledge clearly implies the corresponding NP-hardness result in the more flexible setting of partial 
knowledge (see 1 13] for more discussion of this point). 

Exceptions are, e.g., l21l l2ll3l [T4l . where |2][3 14] consider both the unique-winner model and the nonunique-winner 
model. 
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2.2.1 Control by Adding Candidates 

In this control scenario, the chair seeks to reach his or her goal by adding to the election, which 
originally involves only "qualified" candidates, some new candidates who are chosen from a given 
pool of spoiler candidates. In their study of control for plurality, Condorcet, and approval voting, 
Hemaspaandra, Hemaspaandra, and Rothe [13] considered only the case of adding an unlimited 
number of spoiler candidates (which is the original variant of this problem as defined by Bartholdi, 
Tovey, and Trick [12]). We consider the same variant of this problem here to make our results 
comparable with those established in |[T3ll . but for completeness we in addition consider the case of 
adding a limited number of spoiler candidates, where the prespecified limit is part of the problem 
instance. This variant of this problem was introduced by Faliszewski et al. El [B] in analogy 
with the definitions of control by deleting candidates and of control by adding or deleting voters. 
They showed that, for the election system Copeland" they investigate, the complexity of these two 
problems can drastically change depending on the parameter a, see (H[3). 
We first define the unlimited variant of control by adding candidates. 

Name Control by Adding an Unlimited Number of Candidates. 

Instance An election (CUD,V) and a designated candidate c G C, where the set C of qualified 

candidates and the set D of spoiler candidates are disjoint. 
Question (constructive) Is it possible to choose a subset D' C D such that c is the unique winner 

of election (CUD', 7)? 

Question (destructive) Is it possible to choose a subset D'Cfl such that c is not a unique winner 
of election (CUD',V)? 

The problem Control by Adding a Limited Number of Candidates is defined analogously, with 
the only difference being that the chair seeks to reach his or her goal by adding at most i spoiler 
candidates, where I is part of the problem instance. 

2.2.2 Control by Deleting Candidates 

In this control scenario, the chair seeks to reach his or her goal by deleting (up to a given number 
of) candidates. Here it may happen that inadmissible AV strategies are created by the control action, 
but RuleQ]will coerce admissibility again (by moving the line between some voter's acceptable and 
inacceptable candidates to behind the top candidate or to before the bottom candidate whenever 
necessary). 

Name Control by Deleting Candidates. 

Instance An election (C,V), a designated candidate c E C, and a nonnegative integer I. 
Question (constructive) Is it possible to delete up to I candidates from C such that c is the unique 

winner of the resulting election? 
Question (destructive) Is it possible to delete up to i candidates (other than c) from C such that c 

is not a unique winner of the resulting election? 
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2.2.3 Control by Partition and Run-Off Partition of Candidates 

There are two partition-of-candidates control scenarios. In both scenarios, the chair seeks to reach 
his or her goal by partitioning the candidate set C into two subsets, C\ and C2, after which the 
election is conducted in two stages. In control by partition of candidates, the election's first stage 
is held within only one group, say C\, and this group's winners that survive the tie-handling rule 
used (see the next paragraph) run against all members of C2 in the second and final stage. In control 
by run-off partition of candidates, the election's first stage is held separately within both groups, C\ 
and C%, and the winners of both subelections that survive the tie-handling rule used run against each 
other in the second and final stage. 

We use the two tie-handling rules proposed by Hemaspaandra, Hemaspaandra, and Rothe lfl3l : 
ties-promote (TP) and ties-eliminate (TE). In the TP model, all the first-stage winners of a subelec- 
tion, (Ci, V) or (C2, V), are promoted to the final round. In the TE model, a first-stage winner of a 
subelection, (C\,V) or (C2, V), is promoted to the final round exactly if he or she is that subelection's 
unique winner. 

Note that partitioning the candidate set C into C\ and C2 is, in some sense, similar to deleting 
C2 from C to obtain subelection (Ci,V) and to deleting C\ from C to obtain subelection (C2,V). 
Also, the final stage of the election may have a reduced number of candidates (which depends on 
the tie-handling rule used). So, in the partitioning cases, it may again happen that inadmissible AV 
strategies are created by the control action, but Rule Q] will coerce admissibility again. 

Name Control by Partition of Candidates. 

Instance An election (C,V) and a designated candidate c G C. 

Question (constructive) Is it possible to partition C into C\ and C2 such that c is the unique winner 
of the final stage of the two-stage election in which the winners of subelection (Ci,V) that 
survive the tie-handling rule run against all candidates in C2 (with respect to the votes in V)l 

Question (destructive) Is it possible to partition C into C\ and C2 such that c is not a unique winner 
of the final stage of the two-stage election in which the winners of subelection (C\,V) that 
survive the tie-handling rule run against all candidates in C2 (with respect to the votes in V)? 

Name Control by Run-Off Partition of Candidates. 

Instance An election (C, V) and a designated candidate c G C. 

Question (constructive) Is it possible to partition C into C\ and C2 such that c is the unique win- 
ner of the final stage of the two-stage election in which the winners of subelection (C\,V) 
that survive the tie-handling rule run (with respect to the votes in V) against the winners of 
subelection (C2, V) that survive the tie-handling rule? 

Question (destructive) Is it possible to partition C into Cy and C2 such that c is not a unique 
winner of the final stage of the two-stage election in which the winners of subelection (Ci , V ) 
that survive the tie-handling rule run (with respect to the votes in V) against the winners of 
subelection (C2, V) that survive the tie-handling rule? 
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2.2.4 Control by Adding Voters 



In this control scenario, the chair seeks to reach his or her goal by introducing new voters into a 
given election. These additional voters are chosen from a given pool of voters whose preferences 
and approval strategies over the candidates from the original election are known. Again, the number 
of voters that can be added is prespecified. 

Name Control by Adding Voters. 

Instance An election (C,V), a collection W of additional voters with known preferences and ap- 
proval strategies over C, a designated candidate c G C, and a nonnegative integer I. 

Question (constructive) Is it possible to choose a subset ff'Cff with ||W'|| < I such that c is the 
unique winner of election (C,VUW')? 

Question (destructive) Is it possible to choose a subset ff'Cff with \\W'\\ < £ such that c is not a 
unique winner of election (C,VU W')l 

2.2.5 Control by Deleting Voters 

The chair here seeks to reach his or her goal by suppressing (up to a prespecified number of) voters. 
Name Control by Deleting Voters. 

Instance An election (C,V), a designated candidate c G C, and a nonnegative integer £. 
Question (constructive) Is it possible to delete up to I voters from V such that c is the unique 

winner of the resulting election? 
Question (destructive) Is it possible to delete up to I voters from V such that c is not a unique 

winner of the resulting election? 

2.2.6 Control by Partition of Voters 

In this scenario, the election again is conducted in two stages, and the chair now seeks to reach his 
or her goal by partitioning the voters V into two subcommittees, V\ and Vi. In the first stage, the 
subelections (C,V\) and (C, V2) are ne ld separately in parallel, and the winners of each subelection 
who survive the tie-handling rule move forward to the second and final stage in which they compete 
against each other. 

As in the candidate-deletion and the candidate-partition cases, also in control by partition of 
voters it may happen that inadmissible AV strategies are created by the control action, since the 
final stage of the election may have a reduced number of candidates. However, if that happens then 
Rule Q] will again coerce admissibility. 

Name Control by Partition of Voters. 

Instance An election (C,V) and a designated candidate c G C. 

Question (constructive) Is it possible to partition V into V\ and V% such that c is the unique win- 
ner of the final stage of the two-stage election in which the winners of subelection (C,Vi) 
that survive the tie-handling rule run (with respect to the votes in V) against the winners of 
subelection (C,^) that survive the tie-handling rule? 
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Question (destructive) Is it possible to partition V into V\ and V2 such that c is not a unique win- 
ner of the final stage of the two-stage election in which the winners of subelection (C,Vi) 
that survive the tie-handling rule run (with respect to the votes in V) against the winners of 
subelection (C, V2) that survive the tie-handling rule? 

2.3 A Brief Discussion of SP-AV 

The notion of SP-AV, as defined here, slightly differs from the definition proposed in this paper's 
precursors |4l[25]. For example, |4] specifically required for single-candidate elections that each 
voter must approve of this candidate. In the present paper, we drop this requirement, as it in fact 
is not needed (because the one candidate in a single-candidate election will always win — even with 
zero approvals, i.e., SP-AV is a "voiced" voting system). 

The other definitional change is more subtle. In (4) |25l, we adopted Brams and Sanver's as- 
sumption that voters v are required to have admissible AV strategies (i.e., only AV strategies S v with 
7^ S v 7^ C were allowed)!^! By this assumption, any vote with an inadmissible AV strategy was 
considered void, and we applied our rule of rewriting inadmissible AV strategies to coerce admissi- 
bility only when a control action had turned an originally admissible vote into an inadmissible one. 
One problem with this approach was that this rule depended on (and could be viewed as redefining) 
control rather than being an integral part of the voting system itself. In contrast, we now allow vot- 
ers to cast inadmissible votes, and Rule Q] will turn them into admissible votes the same way it will 
coerce admissibility for votes that became inadmissible in the course of a control action. The in- 
preparation bookchapter ll26l elaborates on this point and on other points regarding the definitional 
changes SP-AV has undergone in the course of its development up to its final form in the present 
paper. We stress that none of the two changes mentioned above has a severe impact on our findings 
or their proofs. 

Another issue to be addressed is that the choice of Rule Q] might seem to be purely a matter of 
taste, at first glance. For example, given an inadmissible AV strategy of the form \ a b c d (re- 
spectively, a bed |), why don't we change it into an admissible vote of the form, say, a b \ c d 
rather than, according to Rule[Q into a \ b c d (respectively, a b c \ d)? The reason is that, once 
we have agreed that it is desirable to coerce admissibility, our choice of Rule [T] is the most sensible 
way, as this is the minimally invasive rule to coerce admissibility among all possible such rules: We 
do change the voters' approval strategies, but we wish to do this in the least harmful way. 

2.4 Immunity, Susceptibility, Vulnerability, and Resistance 

The following notions — which are due to Bartholdi, Tovey, and Trick [12] (see also lfT3l l20l l2l l3l 
14]) — will be central to our complexity analysis of the control problems for SP-AV. 

Definition 2.2. Let £ be an election system and let <I> be some given type of control. 

1. £ is said to be immune to <I>-control if 

"'Except that [ 1 1 excludes only the case S v 7^ C, see Footnote|6] 
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(a) <i> is a constructive control type and it is never possible for the chair to turn a designated 
candidate from being not a unique winner into being the unique winner via exerting <£>- 
control, or 

(b) Q is a destructive control type and it is never possible for the chair to turn a designated 
candidate from being the unique winner into being not a unique winner via exerting 
^-control. 

2. £ is said to be susceptible to <J>-control if it is not immune to ^-control. 

3. £ is said to be vulnerable to <J>-control if S is susceptible to ^-control and the control problem 
associated with <I> is solvable in polynomial time. 

4. $ is said to be resistant to <I>-control if $ is susceptible to ^-control and the control problem 
associated with <t> is NP-hard. 

For example, approval voting is known to be immune to eight of the twelve types of candidate 
control considered in lfl3l . The proofs of these results crucially employ the equivalences and im- 
plications between immunity/susceptibility for various control types shown in |[T3l and the fact that 
approval voting satisfies the unique version of the Weak Axiom of Revealed Preference (denoted 
by Unique-WARP, see lf3~3l El): If a candidate c is the unique winner in a set C of candidates, 
then c is the unique winner in every subset of C that includes c. In contrast with approval voting, 
sincere-strategy preference-based approval voting does not satisfy Unique-WARP, and we will see 
later in Section [3TT1 that it indeed is susceptible to each type of control considered here. 

Proposition 2.3. Sincere-strategy preference-based approval voting does not satisfy Unique-WARP. 

Proof. Consider the election (C,V) with candidate set C = {a,b,c, d} and voter collection V = 
{vi,V2,V3,V4}. Removing candidate d changes the profile as follows according to Rule[U 



vi : 


b 


c 


a 


| d 




b c a 


vi : 


c 




a 


d b 


is changed to 


c a b 


v-i : 


a 


b 


c 


1 d 


(by removing d): 


a b c 


v 4 : 


b 


a 


c 


d 




b a c 



Note that the approval/disapproval line has been moved in voters vi, V3, and V4 according to 
RuleQ] Although c was the unique winner of (C, V), c is not a winner of ({a,b,c},V) (in fact, b is 
the unique winner of ({a,b,c},V)). Thus, SP-AV does not satisfy Unique-WARP □ 



3 Results for Sincere-Strategy Preference-Based Approval Voting 

Theorem 13.11 below (see also Table 13 shows the complexity results regarding control of elections 
for SP-AV. As mentioned in the introduction, with 19 resistances and only three vulnerabilities, this 
system has more resistances and fewer vulnerabilities to control (for our 22 control types) than is 
currently known for any other natural voting system with a polynomial-time winner problem. 
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Plurality 


SP-AV 


AV 


Control by 


Constr. 


Destr. 


Constr. 


Destr. 


Constr. 


Destr. 


Adding an Unlimited Number of Candidates 


R 


R 


R 


R 


I 


V 


Adding a Limited Number of Candidates 


R 


R 


R 


R 


I 


V 


Deleting Candidates 


R 


R 


R 


R 


V 


I 


Partition of Candidates 


TE: R 


TE: R 


TE: R 


TE: R 


TE: V 


TE: I 




TP: R 


TP: R 


TP: R 


TP: R 


TP: I 


TP: I 


Run-off Partition of Candidates 


TE: R 


TE: R 


TE: R 


TE: R 


TE: V 


TE: I 




TP: R 


TP: R 


TP: R 


TP: R 


TP: I 


TP: I 


Adding Voters 


V 


V 


R 


V 


R 


V 


Deleting Voters 


V 


V 


R 


V 


R 


V 


Partition of Voters 


TE: V 


TE: V 


TE: R 


TE: V 


TE: R 


TE: V 




TP: R 


TP: R 


TP: R 


TP: R 


TP: R 


TP: V 



Table 2: Overview of results. Key: I means immune, R means resistant, V means vulnerable, TE 
means ties-eliminate, and TP means ties-promote. Results for SP-AV are new; their proofs are either 
new or draw on proofs from lfl3l . Results for plurality and AV, stated here to allow comparison, 
are due to Bartholdi, Tovey, and Trick lTT2l and to Hemaspaandra, Hemaspaandra, and Rothe lfl3l . 
(The results for control by adding a limited number of candidates for plurality and approval voting, 
though not stated explicitly in lfl2"l[T3ll . follow immediately from the proofs of the corresponding 
results for the "unlimited" variant of the problem, see Footnote [4]) 

Theorem 3.1. Sincere-strategy preference-based approval voting has the resistances and vulnera- 
bilities to the 22 types of control defined in Section \Z2\ that are shown in Table\2\ 

3.1 Susceptibility 

By definition, all resistance and vulnerability results in particular require susceptibility. In the fol- 
lowing two lemmas, we prove that sincere-strategy preference-based approval voting is susceptible 
to the 22 types of control defined in Section |2T2"1 To this end, we will make use of Theorems 4.1, 
4.2, and 4.3 of Hemaspaandra, Hemaspaandra, and Rothe lfT3l that provide susceptibility equiv- 
alences and implications for various control types0 For the sake of self-containment, we give 
these results below, stated essentially word-for-word as in lfT3l . In particular, Theorem 13.21 (which 
is lfl3l Thm. 4.1]) gives four equivalences between susceptibility to constructive/destructive control 
by adding/deleting candidates/voters; Theorem 13.31 (which is lfT3l Thm. 4.2]) gives four implica- 
tions that link susceptibility to control by (run-off) partition of candidates/voters with susceptibility 
to control by deleting candidates/voters; and Theorem 13.41 (which is [13, Thm. 4.3]) states that 
every "voiced" voting system is susceptible to constructive control by deleting candidates and to 
destructive control by adding candidates, and that for each voiced voting system susceptibility to 
destructive control by partition of voters (in model TE or TP) implies susceptibility to destructive 
control by deleting voters. A voting system is said to be voiced if in every one-candidate election, 
this candidate wins. 



11 Although 1 13] does not consider the case of control by adding a limited number of candidates explicitly, it is imme- 
diate that all proofs for the "unlimited" case in 1 13 1 work also for this "limited" case. 
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Theorem 3.2 (Thm. 4.1 of [13]). I. A voting system is susceptible to constructive control by 
adding (either a limited or an unlimited number of) candidates if and only if it is susceptible 
to destructive control by deleting candidates. 

2. A voting system is susceptible to constructive control by deleting candidates if and only if it 
is susceptible to destructive control by adding (either a limited or an unlimited number of) 
candidates. 

3. A voting system is susceptible to constructive control by adding voters if and only if it is 
susceptible to destructive control by deleting voters. 

4. A voting system is susceptible to constructive control by deleting voters if and only if it is 
susceptible to destructive control by adding voters. 

Theorem 3.3 (Thm. 4.2 of [13]). 1. If a voting system is susceptible to constructive control by 
partition of voters (in model TE or TP), then it is susceptible to constructive control by delet- 
ing candidates. 

2. If a voting system is susceptible to constructive control by partition or run-off partition of 
candidates (in model TE or TP), then it is susceptible to constructive control by deleting 
candidates. 

3. If a voting system is susceptible to constructive control by partition of voters in model TE, 
then it is susceptible to constructive control by deleting voters. 

4. If a voting system is susceptible to destructive control by partition or run-off partition of 
candidates (in model TE or TP), then it is susceptible to destructive control by deleting can- 
didates. 

Theorem 3.4 (Thm. 4.3 of [13]). 1. If a voiced voting system is susceptible to destructive con- 
trol by partition of voters (in model TE or TP), then it is susceptible to destructive control by 
deleting voters. 

2. Each voiced voting system is susceptible to constructive control by deleting candidates. 

3. Each voiced voting system is susceptible to destructive control by adding ( either a limited or 
an unlimited number of) candidates. 

We start with susceptibility to candidate control for SP-AV. 

Lemma 3.5. SP-AV is susceptible to constructive and destructive control by adding candidates ( in 
both the "limited" and the "unlimited" variant of the problem), by deleting candidates, and by 
partition of candidates ( with or without run-off and for each in both tie-handling models, TE and 
TP). 
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Proof. From Theorem 13.41 and the obvious fact that SP-AV is a voiced voting system, it im- 
mediately follows that SP-AV is susceptible to constructive control by deleting candidates and to 
destructive control by adding candidates (in both the "limited" and the "unlimited" variant of the 
problem). 

Consider the election (C,V) with candidate set C = {a,b,c,d,e,f} and voter collection V = 
{vi,V2, . . . ,V(,} and the following partition of C into C\ = {a,c,d} and C2 = {b,e,f}: 









(C,V) 




is partitioned into 


(Ci,V) and 


(C 2 ,V) 


Vl 


a 


b 


c d 


e 


/ 


a c d 


b | e f 


v 2 


b 


c 


a d 


e 


/ 


c a d 


b | e f 


v 3 


a 


c 


b d 


e 


/ 


a c d 


b | e f 


v 4 


b 


a 


c d 


e 


/ 


a c d 


b e f 


V5 


a 


b 


dec 




/ 


a d c 


b e | / 


V6 


a 


e 


d f c 




b 


a d c 


e f | b 



With six approvals, c is the unique winner of (C,V). However, a is the unique winner of (Ci,V), 
which implies that c is not promoted to the final stage, regardless of whether we use the TE or TP tie- 
handling rule and regardless of whether we employ a partition of candidates with or without run-off. 
Thus, SP-AV is susceptible to destructive control by partition of candidates (with or without run-off 
and for each in both tie-handling models, TE and TP). By Theorem 13.31 SP-AV is also susceptible 
to destructive control by deleting candidates. By Theorem l3.2l in turn, SP-AV is also susceptible to 
constructive control by adding candidates (in both the "limited" and the "unlimited" variant of the 
problem). 

Note that a is not the unique winner of (C,V), as a loses to c by 5 to 6. However, if we partition 
C into C\ = {a,c,d} and C2 = {b,e,f}, then a is the unique winner of (C\,V) and b is the unique 
winner of (C2, V). Since both subelections have a unique winner, it does not matter whether the TE 
rule or the TP rule is applied. The final-stage election is ({a,b},V) in the case of run-off partition 
of candidates, and it is {{a,b,e,f}, V) in the case of partition of candidates. Since a wins against b 
in the former case by 4 to 2 and in the latter case by 5 to 4 (and e and / do even worse than b in this 
case), a is the unique winner in both cases. Thus, SP-AV is susceptible to constructive control by 
partition of candidates (with or without run-off and for each in both models, TE and TP). □ 

We now turn to susceptibility to voter control. 

Lemma 3.6. SP-AV is susceptible to constructive and destructive control by adding voters, by delet- 
ing voters, and by partition of voters in both tie-handling models, TE and TP. 

Proof. Consider the election (C,V) with candidate set C = {a,b,c,d,e,f} and voter collection 
V = {vi,V2,...,vg} and partition V into V\ = {vi,V2,V3,V4} and V2 = {V5, V(,,vj, vg}. Thus, we 



14 



change: 









(C,V) 




into 




(C.Vi) 


and 




(c,v 2 ) 




VI 


a 


b 


c d 


e 


/ 


a 


b c d e 


/ 








v 2 


a 


c 


| b d 


e 


/ 


a 


c b d e 










V3 


c 


b 


a d 


e 


/ 


c 


b a d e 


/ 








v 4 


a 


b 


d e 


c 


/ 


a 


b d e c 


./■ 








V5 


a 


d 


c b 


e 


/ 








a d 


c b e 


f 


V6 


e 


b 


c d 


a 


/ 








e b 


c d a 


f 


V 7 


d 


e 


c f 1 


b 


a 








d e 


c f | b 


a 


V8 


d 


f 


b a 


c 


e 








d f 


b a c 


e 



With six approvals, c is the unique winner of (C,V). However, a is the unique winner of (C,V\) and 
d is the unique winner of (C,V^), which implies that c is not promoted to the final stage, regardless 
of whether we use the TE or TP tie-handling rule. (In the final-stage election ({a,d},V), a wins by 
5 to 3.) Thus, SP-AV is susceptible to destructive control by partition of voters in models TE and 
TP. By Theorem 13.41 and since SP-AV is a voiced system, SP-AV is also susceptible to destructive 
control by deleting voters. Finally, by Theorem l3.2[ SP-AV is also susceptible to constructive control 
by adding voters. 

Now, if we let a and c change their roles in the above election and argument, we see that SP-AV 
is also susceptible to constructive control by partition of voters in models TE and TP. By Theo- 
rem 13.31 susceptibility to constructive control by partition of voters in model TE implies suscepti- 
bility to constructive control by deleting voters. Again, by Theorem 13.21 SP-AV is also susceptible 
to destructive control by adding voters. □ 



3.2 Candidate Control 

Theorems 13 .7 1 and 13. 101 below show that sincere-strategy preference-based approval voting is fully 
resistant to candidate control. This result should be contrasted with that of Hemaspaandra, Hema- 
spaandra, and Rothe lfl3l . who proved immunity and vulnerability for all cases of candidate control 
within approval voting (see Table [2]). In fact, SP-AV has the same resistances to candidate control 
as plurality, and we will show that the construction presented in [13 ] to prove plurality resistant also 
works for sincere-strategy preference-based approval voting in all cases of candidate control ex- 
cept one — namely, except for constructive control by deleting candidates. Theorem l3. lOl establishes 
resistance for this one missing case. 

All resistance results in this section follow via a reduction from the NP-complete problem Hit- 
ting Set (see, e.g., Garey and Johnson 11271 ): 

Name Hitting Set. 

Instance A set B = {b\,b2,- ■ ■ ,b m }, a nonempty collection 5? = {S\ ,S 2 , ■ ■ ■ ,S n } of subsets 5, C 
BE and a positive integer k < m. 

I2 Our assumption that 5? be nonempty (i.e., that n > 1) is not explicitly specified in Garey and Johnson 1 27 1. However, 
it is clear that requiring n > 1 does not change the complexity of the problem. 
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Question Does have a hitting set of size at most k, i.e., is there a set B' CB with \\B'\\ < k such 
that for each i, 5,-nfl'^0? 

Note that some of our proofs for SP-AV are based on constructions presented in lfl3l to prove the 
corresponding results for approval voting or plurality, whereas some other of our results require new 
insights to make the proof work for SP-AV. For completeness, we will present each construction 
here (even if the modification of a previous construction is rather straightforward), explicitly stating 
whether it is based on a previous construction from [13], and if so, we will state in each case on 
which construction it is based and what the differences to the related previous construction are. 

Theorem 3.7. SP-AV is resistant to all types of constructive and destructive candidate control de- 
fined in Section \2.2\ except for constructive control by deleting candidates ( which will be handled 
separately in Theorem \3.l0\ . 

Resistance of SP-AV to constructive control by deleting candidates, which is the missing case 
in Theorem 13.71 will be shown as Theorem l3. lOl below. 

The proof of Theorem 13.71 is based on a construction for plurality in lfl3l . except that only 
the arguments for destructive candidate control are given there (simply because plurality was shown 
resistant to all cases of constructive candidate control already by Bartholdi, Tovey, and Trick lfT2l via 
different constructions). We now provide a short proof sketch of Theorem 13 .7 1 and the construction 
from [ 13] (slightly modified so as to formally conform with the SP-AV voter representation) in order 
to (i) show that the same construction can be used to establish all but one resistances of SP-AV to 
constructive candidate control, and (ii) explain why constructive control by deleting candidates 
(which is missing in Theorem l3.7l) does not follow from this construction. 

Proof Sketch of Theorem 13.71 Susceptibility holds by Lemma [331 in each case. The resistance 
proofs are based on a reduction from Hitting Set and employ Construction 13.81 below, slightly mod- 
ified so as to formally conform with the SP-AV voter representation. 

Construction 3.8 (Hemaspaandra et al. lfl3l ). Let (B,y,k) be a given instance of Hitting Set, 
where B = {b\,b2, . . . ,b m } is a set, = {Si, £2, ■■■ ,S n } is a nonempty collection of subsets S; C B, 
and k<mis a positive integer. Define the election (C, V), where C = B U {c, w} is the candidate set 
and where V consists of the following voters: 

1. There are 2{m — k)+2n{k-\-\) + 4 voters of the form: c \ w B. 

2. There are 2n(k+ 1) + 5 voters of the form: w \ c B. 

3. For each i, 1 < i < n, there are 2(k+ 1) voters of the form: S; | c w (B — Si). 

4. For each j, 1 < j <m, there are two voters of the form: bj | w c (B — {bj}). 
Since 

score ({ C ,y»},v)(c) - score {{c ^ w}y) (w) 

= (2(m-k) + 2n(k+l)+4 + 2n(k+\))-(2n(k+l) + 5 + 2m) 
= 2k(n-l)+2n-\ 
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is positive (because of n > 1), c is the unique winner of election ({c,w},V). The key observation is 
the following proposition, which can be proven as in lfl3"l . 

Proposition 3.9 (Hemaspaandra et al. lfT3l ). 1. If y has a hitting set B' of size k, then w is the 
unique SP-AV winner of election {B' U {c, w}, V ). 

2. Let DCfiU {w}. If c is not the unique SP-AV winner of election (D U {c}, V ), then there 
exists a set B' Cfi such that 

(a) D = B'U{w}, 

(b) w is the unique SP-AV winner of election (B'U {c,w},V), and 

(c) B' is a hitting set of y of size less than or equal to k. 

As an example, the resistance of SP-AV to constructive and destructive control by adding candi- 
dates (both in the limited and the unlimited version of the problem) now follows immediately from 
Proposition 13.91 via mapping the Hitting Set instance (B,y,k) to the set {c,w} of qualified candi- 
dates and the set B of spoiler candidates, to the voter collection V, and by having c be the designated 
candidate in the destructive case and by having w be the designated candidate in the constructive 
case. 

The other cases of Theorem l3.7l can be proven similarly. □ Theorem l3Jl 

Turning now to the missing case mentioned in Theorem 13.71 above : Why does Construction 13.81 
not work for constructive control by deleting candidates? Informally put, the reason is that c is 
the only serious rival of w in the election (C,V) of Construction 13.81 so by simply deleting c the 
chair could make w the unique SP-AV winner, regardless of whether y has a hitting set of size k. 
However, via a different construction, we can prove resistance also in this case. 

Theorem 3.10. SP-AV is resistant to constructive control by deleting candidates. 

Proof. Susceptibility holds by Lemma 13.51 To prove resistance, we provide a reduction from 
Hitting Set0 Let (B, y, k) be a given instance of Hitting Set, where B = {b\ , Z?2 , • • • , b m } is a set, 
y = {Si ,52, ... ,5,,} is a nonempty collection of subsets 5; C B, and k < m is a positive integer^ 

Define the election (C, V), where C = B U {w} is the candidate set and V is the collection of 
voters. We assume that the candidates in B are in an arbitrary but fixed order, and for each voter 
below, this order is also used in each subset of B. For example, if B = {^1,^2,^3,^4} (where the 
elements of B are ordered as ^1,^2,^3,^4) and some subset 5; = {b 1,^3} of B occurs in some voter 
then this voter prefers b\ to bj, and so does any other voter whose preference list contains 5;. 

V consists of the following \n(k + 1) + Am — 2k + 3 voters: 

1. For each i, 1 < i < n, there are 2(k + 1) voters of the form: 5,- | [B — 5 ; ) w. 

2. For each i, 1 < i < n, there are 2(k + 1) voters of the form: [B — 5 ; ) w \ 5,-. 

I3 In contrast, Bartholdi, Tovey, and Trick \Y1\ gave a reduction from Exact Cover by Three-Sets (which is defined in 
the proof of Theorem [37TTJ to prove that plurality is resistant to constructive control by deleting candidates. 

14 Note that if k = m then B is always a hitting set of size at most k (provided that 5^ contains only nonempty sets — a 
requirement that doesn't affect the NP-completeness of the problem), and we thus may require that k <m. 
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3. For each j, 1 < j < m, there are two voters of the form: bj \ w (B — {bj}). 

4. There are 2(m — k) voters of the form: B \ w. 

5. There are three voters of the form: w \ B. 
Since for each bj G B, the difference 

score (cy){ w ) ~ score (C,v)(bj) = 2n(k+ 1) + 3 — (2n{k + 1) + 2 + 2(m — k)) = 1 — 2(m — k) 

is negative (due to k < m), w loses to each member of B and so does not win election (C, V). 

We claim that has a hitting set 5' of size k if and only if w can be made the unique SP-AV 
winner by deleting at most ni — k candidates. 

From left to right: Suppose has a hitting set B' of size k. Then, for each bj G fi', 

score (b'u{w},v) ( w ) ~ score ^ B 'u{w},v) (bj) = 2n(k+ 1) + 2(m - k) + 3 - (2n(k + 1 ) + 2 + 2(m - k)) = 1 , 

since the approval line is moved for 2{m — k) voters of the third group according to RuleQ} thus 
transferring their approvals from members of B — B 1 to w. It is easy to see that the approval line is not 
moved in any of the other voters according to Rule [TJ in particular, the approval line is not moved 
in any of the voters from the first and second group, since B' PiS, ^ for each i, 1 <i <n. So w is 
the unique SP-AV winner of election (B 1 U {w}, V ). Since B' U {w} = C — {B — B'), it follows from 
= m and = k that deleting m — k candidates from C makes w the unique SP-AV winner. 
From right to left: Let DCflbe any set such that ||D|| <m — k and w is the unique SP-AV 
winner of election (C-D,V). Let B' = (C — D) — {w}. Note that B' C B and that we have the 
following scores in (B' U {w},V): 

score (b'u{w},v)(w) = 2(n - £)(k+ \) +2(m - \\B'\\) + 3, 

score ■(B<u{w},V){bj) < 2n(k+ 1) +2i(k + 1) +2 + 2(m - k) for each bj G B' , 

where t is the number of sets 5; G 5? that are not hit by B' , i.e., B' n Si = 0. Recall that for each i, 
1 < i < n, all of the 2 (k + 1 ) voters of the form S; j (B — Si) w in the first voter group have ranked 
the candidates in the same order. Thus, for each i, 1 < i < n, whenever B 1 HSi = one and the same 
candidate in B' benefits from moving the approval line according to Rule [T] namely the candidate 
occurring first in our fixed ordering of B'. Call this candidate b and note that 

score (B'u{w},v)(t>) = 2n(k+ 1) +2l{k+ 1) +2 + 2(m - k). 

Since w is the unique SP-AV winner of (B' U {w},V), w has more approvals than any candidate in 
B' and in particular more than b. Thus, we have 

score ( B 'u{w},v) O) - score (b>u{ w },v) 0) 
= 2{n - i) {k + 1 ) + 2{m - \\B' || ) + 3 - 2n{k + 1 ) - 2£{k + 1 ) - 2 - 2(m - k) 
= l+2(jk-||fl'||)-4£(jk+l) > 0. 
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Solving this inequality for £, we obtain 



o<i<aiP< 4+4k 



4(k+\) 4(k+l) 

Thus I = 0. It follows that l + 2(k- \\B'\\) > 0, which implies < k. Thus, B' is a hitting set of 
size at most k. □ 



3.3 Voter Control 

Turning now to control by adding and by deleting voters, it is known from lfl3ll that approval voting 
is resistant to constructive control and is vulnerable to destructive control (see Table |2])0 Their 
proofs can be modified so as to also apply to sincere-strategy preference-based approval voting. We 
here provide only proof sketches; more details of the proofs are provided in the technical report 
version |[25l . 

Theorem 3.11. SP-AV is resistant to constructive control by adding voters and by deleting voters 
and is vulnerable to destructive control by adding voters and by deleting voters. 

Proof Sketch of Theorem 13.111 Susceptibility holds by Lemma [3^61 in all cases. To prove resis- 
tance to constructive control by adding voters (respectively, by deleting voters), the construction of 
lf3~3l Thm. 4.43] (respectively, of lfl3l Thm. 4.44]) works, modified only by specifying voter prefer- 
ences consistently with the voters' approval strategies (and, in the deleting- voters case, by adding 
a dummy candidate who is disapproved of and ranked last by every voter in the construction to 
ensure an admissible AV strategy profile). These constructions provide polynomial-time reductions 
from the NP-complete problem Exact Cover by Three-Sets (denoted by X3C; see, e.g., Garey and 
Johnson ll27l ). which is defined as follows: 

Name Exact Cover by Three-Sets (X3C). 

Instance A set B = {b\,b2,---,b3 m }, and a collection y = {Si , S2, ■ ■ ■ , S n } of subsets 

Si C B with 1 1 Sj 1 1 = 3 for each i. 
Question Does have an exact cover for B, i.e., is there a subcollection J?" C such that every 

element of B occurs in exactly one set in SP'I 

The polynomial-time algorithms showing that approval voting is vulnerable to destructive con- 
trol by adding voters and by deleting voters [13, Thm. 4.24] can be straightforwardly adapted to 
also work for sincere-strategy preference-based approval voting, since no approval lines are moved 
according to Rule [Jin these control scenarios. □ 

I5 Meir et al. (21 1 proved in their interesting "multi-winner" model (which generalizes Bartholdi, Tovey, and Trick's 
model 1 12 1 by adding a utility function and some other parameters) that approval voting is resistant to constructive control 
by adding voters. According to Footnote 13 of 1131 . this resistance result immediately follows from the corresponding 
resistance result in | 28 , 131, essentially due to the fact that lower bounds in more flexible models are inherited from more 
restrictive models. 

16 Our assumption that m > 1 is not explicitly specified in Garey and Johnson 1271 . However, it is clear that requiring 
m > 1 does not change the complexity of the problem. 
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We now prove that, just like plurality, sincere-strategy preference-based approval voting is re- 
sistant to constructive and destructive control by partition of voters in model TP. In fact, the proof 
presented in |fT3l for plurality in these two cases also works for SP-AV with minor modifications. 
In contrast, approval voting is vulnerable to the destructive variant of this control type lPT3l . 

Theorem 3.12. SP-AV is resistant to constructive and destructive control by partition of voters in 
model TP. 

Proof Sketch of Theorem 13.121 The proof is again based on Construction 13.81 but the reduction 
is now from Restricted Hitting Set, which is defined just as Hitting Set (see Section l3~2l except that 
n(k+ 1) + 1 <m — his required in addition. Restricted Hitting Set is also NP-complete lfT3~ll . Now, 
the key observation is the following proposition, which can be proven as in fl3l . 

Proposition 3.13 (Hemaspaandra et al. [13]). Let {B,y,k) be a given Restricted Hitting Set in- 
stance, where B = {b\ , b% y . . . , b m } is a set, 5? = {S\ ,52, • . • ,S n } is a nonempty collection of subsets 
Si C B, and k < m is a positive integer such that n{k + 1) + 1 < m — k. If (C,V) is the election 
resulting from (B, r y,k) via Construction \3. 8\ then the following three statements are equivalent: 

1. .5? has a hitting set of size less than or equal to k. 

2. V can be partitioned such that w is the unique SP-AV winner in model TP. 

3. V can be partitioned such that c is not the unique SP-AV winner in model TP. 

The theorem now follows immediately from Proposition [3j73j □ Theorem lXTH 

Finally, we turn to control by partition of voters in model TE. For this control type, Hema- 
spaandra et al. lfl3l proved approval voting resistant in the constructive case and vulnerable in the 
destructive case. We have the same results for sincere-strategy preference-based approval voting. 
Our resistance proof in the constructive case (see the proof of Theorem 13.141 ) is similar to the cor- 
responding proof of resistance in lfl3l . However, while our polynomial-time algorithm showing 
vulnerability for SP-AV in the destructive case (see the proof of Theorem 13.151 ) is based on the 
corresponding polynomial-time algorithm for approval voting in lfl3l . it extends their algorithm in 
a nontrivial way. 

Theorem 3.14. SP-AV is resistant to constructive control by partition of voters in model TE. 

Proof. Susceptibility holds by Lemma [3761 The proof of resistance is based on the construction 
of lPT3l Thm. 4.46] with only minor changes. Let an X3C instance (B, 5?) be given, where B = 
{b\,b%, . . . ,&3m}, m > 1, is a set and = {5i,52, . . . ,5„} is a collection of subsets 5 ; - C B with 
1 1 5/ 1 1 =3 for each i, 1 < i < n. Without loss of generality, we may assume that n > m. Define the 
value £j = ||{5,- G ^ \ bj G 5, }|| for each j, 1 < j < 3m. 

Define the election (C, V), where C = BU {w,x,y} UZ is the candidate set with the distinguished 
candidate w, Z = {zi,Z2, ■ ■ ■ ,z n }, and where V is defined to consist of the following An + m voters: 

1. For each i, 1 < i < n, there is one voter of the form: y 5,- [ w ((B — 5/) U {x} UZ). 
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2. For each i, 1 < i < n, there is one voter of the form: y Zi | w (BU {x} U (Z — {z,})). 

3. For each i, 1 <i <n, there is one voter of the form: w (Z — {z,}) Bj [ x y z; (B — B,-), 
where B ; = {bj €B\i < n — lj}. 

4. There are n + m voters of the form: x \ y (6U{w}UZ). 

Note that score< cv \{bj) = n for each G B. Since the above construction is only slightly 
modified from the proof of [ 13 , Thm. 4.46], so as to formally conform with the SP-AV voter repre- 
sentation, the same argument as in that proof shows that y has an exact cover for B if and only if w 
can be made the unique SP-AV winner by partition of voters in model TE. Note that, in the present 
control scenario, approval voting and SP-AV can differ only in the run-off, but the construction 
ensures that they don't differ there. 

From left to right, if y has an exact cover for B then partition the set of voters as follows: V\ 
consists of the m voters of the form y Si | w ((B — Sj) U {x} U Z) that correspond to the sets in the 
exact cover, of the n+m voters who approve of only x, and of the n voters who approve of y and zu 
1 <i<n. Let V% = V — V\. It follows that w is the unique SP-AV winner of both subelection (C,V2) 
and the run-off, simply because no candidate proceeds to the run-off from the other subelection, 
(C, V\ ), in which x and y tie for winner with a score of n + m each. 

From right to left, suppose w can be made the unique SP-AV winner by partition of voters in 
model TE. Let (Vi,^) be a partition of V such that w is the unique SP-AV winner of the run- 
off. According to model TE, w must also be the unique SP-AV winner of one subelection, say 
of (C,Vi). Note that each voter of the form y zi \ w (BU {a} U (Z- {z,})) has to be in V 2 (oth- 
erwise, we would have score (c,v,)(w) = score (c,Vi){zi) f° r at l east one U an d so w would not be 
the unique SP-AV winner of (C,V\) anymore). However, if there were more than m voters of 
the form y S, \ w ((6-5;)U{i}UZ) in Vi then score (cy 2 )iy) > n + m, and so y would be the 
unique SP-AV winner of the other subelection, (C, V^)- But then, also in the SP-AV model, y would 
win the run-off against w because score ({ Wi) .}y)(y) =3n + m > n = score ({ w , v },y)(w)> which con- 
tradicts the assumption that w has been made the unique SP-AV winner by the partition (Vi,^)- 
Hence, there are at most m voters of the form y Si \ w ((B — Sj) U {x} UZ) in V2, and these m 
voters correspond to an exact cover of B, since otherwise there would be at least one bj € B with 
score (cy, )(&;) = n = score (c,Vi)(w)- a 

Theorem 3.15. SP-AV is vulnerable to destructive control by partition of voters in model TE. 

Proof. Susceptibility holds by Lemma [331 To prove vulnerability, we describe a polynomial- 
time algorithm showing that (and how) the chair can exert destructive control by partition of vot- 
ers in model TE for sincere-strategy preference-based approval voting. Our algorithm extends the 
polynomial-time algorithm designed by Hemaspaandra et al. |[T3l to prove approval voting vulnera- 
ble to this type of control. Specifically, our algorithm adds Loop 2 below to their algorithm, and we 
will explain below why it is necessary to add this second loop. 

Let (C,V) be an election, and for each voter v € V, let 5 V C C denote v's AV strategy. In each 
iteration of Loop 1 in the algorithm below, we will consider three candidates, a, b, and c. Define the 
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following five numbers 

w c = \\{vev\ags v , bgs v , ces v }\\, L c = \\{vev\aes v , bes v , c#s v }\\, 

D a = \\{v€V\a€S v ,b&S v ,c#S v }\\, D b = \\{v G V \a <£S V , b G S v , c £S V }\\, and 
D ac = \\{veV\aeS v ,b^S v ,ceS v }\\. 

In addition, we introduce the following notation. Given an election (C,V) and two distinct 
candidates x,y G C, let diff(x,y) denote the number of voters in V who prefer x to y minus the 
number of voters in V who prefer y to x. Define B c to be the set of candidates y ^ c in C such that 

diff(y,c)>o. 

The input to our algorithm is an election (C,V), where each voter v G V has a sincere AV 
strategy S v (otherwise, the input is considered malformed and outright rejected), and a distinguished 
candidate c G C. On this input, our algorithm works as follows. 

1. Checking the trivial cases: can be done as in the case of approval voting, see the proof of 
[13, Thm. 4.21]. In particular, if C = {c} then output "control impossible" and halt, since c 
cannot help but win. If C contains more candidates than only c but c already is not the unique 
SP-AV winner of (C,V) then output the (successful) partition (V,0) and halt. Otherwise, if 
||C|| = 2 then output "control impossible" and halt, as c is the unique SP-AV winner of (C, V) 
in the current case and so, however the voters are partitioned, c must win — against the one 
rivalling candidate — at least one subelection and also the run-off. 

2. Loop 1: For each a,b G C such that ||{a,£,c}|| = 3, check whether V can be partitioned 

into V\ and V2 such that score '(c,Vi){ a ) — score (c,Vi)( c ) an d score (c,v 2 )(b) > score (c,v 2 )( c )- ^ s 
shown in the proof of (131 Thm. 4.21], this is equivalent to checking 

(3.1) W c -L c <D a +D h . 

If (13.11) fails, this a and b cannot prevent c from being the unique winner of at least one 
subelection and thus also of the run-off, so we move on to test the next a and b in this loop. 
If (13.11 ) holds, however, output the partition (Vi,T^) and halt, where V\ consists of the voters 
contributing to D a , of the voters contributing to D ac , and of min (W c ,D a ) voters contributing 
to W c , and where V% = V — V\ . 

3. Loop 2: For each d G B c , partition V as follows. Let Vi consist of all voters in V who approve 
of d, and let V2 = V — V\. If is the unique winner of (C,V\), then output (Vi,^) as a 
successful partition and halt. Otherwise, go to the next d G B c . 

4. Termination: If in no iteration of either Loop 1 or Loop 2 a successful partition of V was 
found, then output "control impossible" and halt. 

I7 This notation is adopted from 11131 and adjusted here to the SP-AV system. W c is the number of votes in which c wins 
one approval against both a and b, L c is the number of votes in which c /oses one approval against both a and b, and D a , 
Dfr, and D ac are the numbers of votes in which the candidate(s) in the subscript gain one approval against the candidate(s) 
not in the subscript (thus decreasing their deficit). 
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Let us give a short explanation of why Loop 2 is needed for SP-AV by stressing the difference 
with approval voting. As shown in the proof of lfT3l Thm. 4.21], if none of the trivial cases applied, 
then condition d3.ll ) holds for some a,i£C with || {a, b, c} || = 3 if and only if destructive control by 
partition of voters in model TE is possible for approval voting. Thus, for approval voting, if Loop 1 
was not successful for any such a and b, we may immediately jump to the termination stage, where 
the algorithm outputs "control impossible" and halts. In contrast, if none of the trivial cases applied, 
then the existence of candidates a and b with ||{a,ft,c}|| = 3 who satisfy (13.11 ) is not equivalent to 
destructive control by partition of voters in model TE being possible for SP-AV: It is a sufficient, yet 
not a necessary condition. The reason is that even if there are no candidates a and b who can prevent 
c from winning one subelection (in some partition of voters) and from proceeding to the run-off, it 
might still be possible that c loses or ties the run-off due to moving the approval line according to 
Ruled] 

Indeed, if Loop 1 was not successful, c will lose or tie the run-off exactly if there exists a 
candidate d^c such that diff(d, c) > and d can win one subelection (for some partition of voters). 
This is precisely what is being checked in Loop 2. Indeed, note that the partition (Vi,^) chosen 
in Loop 2 for d G B c is the best possible partition for d in the following sense: If d is not a unique 
SP-AV winner of subelection (C,Vi) then, for each W C V, d is not a unique SP-AV winner of 
subelection (C,W). To see this, simply note that if d is not a unique SP-AV winner of (C, V\), then 
there is some candidate x with score (c,y,)(*) = score (cy x ){d) = ||Vi||, which by our choice of V\ 
implies score^c.w) ( x ) > score (c,w) (d) for each subset W C V. □ 



4 Conclusions and Open Questions 

We have shown that Brams and Sanver's sincere-strategy preference-based approval voting sys- 
tem HI, when adjusted so as to coerce admissibility (rather than excluding inadmissible votes a 
priori), combines the resistances of approval and plurality voting to procedural control: SP-AV is 
resistant to 19 of the 22 previously studied types of control. On the one hand, like Copeland voting 
ijHIH, SP-AV is fully resistant to constructive control, yet unlike Copeland it additionally is broadly 
resistant to destructive control. On the other hand, like plurality [2] [T21 El O, SP-AV is fully 
resistant to candidate control, yet unlike plurality it additionally is broadly resistant to voter control. 
In conclusion, for these 22 types of control, SP-AV has more resistances and fewer vulnerabilities to 
control than is currently known for any other natural voting system with a polynomial-time winner 
problem (see Table []]). However, when comparing approval voting and SP-AV, it should also be 
noted that the former is even immune to nine of these 22 control types, whereas the latter has no 
immunities at all. Since immunity may be seen as a perfect protection against control and resistance 
provides protection to control only in a computational sense, one should carefully evaluate the pros 
and cons of both systems. The result of such an evaluation will certainly depend on which particular 
types of control one wishes to be protected against. 

As an interesting task for future research, we propose to expand the study of SP-AV with respect 
to other computational properties than its behavior regarding procedural control (see, e.g., |[9ll26l). 
and to investigate also its social choice properties in more detail. In addition, we propose as an 
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interesting and extremely ambitious task for future work the study of SP-AV (and other voting 
systems as well) beyond the worst-case — as we have done here — and towards an appropriate typical- 
case complexity model; see, e.g., |[29l [30l [311 |32l |33l for interesting results and discussion in this 
direction. 
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